Update

Run this on the Linux console of your Scrollout F1 machine:

/var/www/bin/update.sh force

Changes

• 2018-04-03Fix bug causing network loss.
• 2018-03-18New release for Debian 9 OS only.
• 2017-08-05UI update.
• 2017-06-02Minor bug fix in subdomains' dkim
• 2017-04-30Add Font Awesome Icons in Web UI
• 2016-12-22Disable SRS for specific hosted domains (for inbound).
• 2016-12-12jitsi-meet removed.
• 2016-10-17Filter MS Office Documents with Macro.
• 2016-10-01Disable SRS for specific hosted domains (for outbound only).
• 2016-10-01Bug fix for postsrsd not starting after install.
• 2016-09-20Introducing privacy for business with self-hosted web conference: jitsi-meet.
• 2016-09-13Fix apt over HTTPS.
• 2016-09-12SRS added
• 2016-08-28Apache replaced with NGINX
• 2016-07-30Fix error logs in Apache 2.4 causing fail2ban to blacklist IP (Debian 8 required)
• 2016-07-22Reduce the risk of DDoS attack.
• 2016-06-25New Scrollout ISO built on Debian 8.5
• 2016-05-23Bock unused ports to external
• 2016-02-27Block application/.*macro.* (Header and attachments <= 5)
• 2016-02-27Fix DNS problem following the glibc fix.
• 2016-02-23Firewall fix for DNS libc vulnerability (CVE-2015-7547).
• 2016-02-06Block obfuscated zip
• 2016-02-02Ban ACE archive.
• 2016-01-27Fix for arj/rar obfuscated archives.
• 2015-12-27Redirect known public DNS to internal
• 2015-11-29Unlock Scrollout for Debian 8 upgrade.
• 2015-11-29RBL for IPv6 in /var/www/rbldns/reputation-ip6-{0..100}
• 2015-11-29Shortcircuit for Whitelist RBL
• 2015-11-18Disable virus FP check (Body filter >=5)
• 2015-10-31Mandatory STARTTLS for cached Domains and IPs.
• 2015-10-28Adjust file banning.
• 2015-10-28Quarantine spam with high complaints.
• 2015-10-24TLS 1.2 with SHA2 and ECC (for SMTP & HTTPS)
• 2015-10-21Adjustment on Average reputation
• 2015-10-20Bug fix: "Server configuration error" for Rate limits in > 5.
• 2015-10-18New: Permanent SPF check for hosted domains.
• 2015-09-29Bug fix: Average reputation.
• 2015-09-27New filter: Average reputation.
• 2015-09-24Check Name Servers (IPs and Names) from Sender Domain against RBLs (Rate limits in <=5)
• 2015-09-24Policy limits removed due to poor code.
• 2015-09-18Tool-tips included for Whitelist and Blacklist
• 2015-09-17Several adjustments for Postfix, Pyzor, SA & scripts.
• 2015-09-17Logs added for Collector.
• 2015-09-12Bug fixes: Spam tag. Issue with uppercase in Route panel.
• 2015-09-07Reported bug fixed (No entry "sa_spam_subject_tag" in policy bank)
• 2015-09-01Reject SPF fail at SMTP (for Connection level <=5)
• 2015-08-23Send original client and IP to protected servers (with xforward enabled)
• 2015-08-23Extend log details.
• 2015-08-14Update on suspicious xls files.
• 2015-08-04Body filter reintroduced to adjust fingerprint score.
• 2015-07-28Block .html files within .zip attachments.
• 2015-07-27Set amavisd-new to reuse SA.
• 2015-07-27Fix some errors in Secure > Senders page.
• 2015-07-23Fix false positive in xlsx/docx (trash 0000.dat).
• 2015-07-23Disable unstable amavis cache in /var/lib/amavis/db/.
• 2015-07-21Permit banned file types for Whitelisted Senders
• 2015-07-20Bug fix: Check Sender validation after RBL checks.
• 2015-07-20Bug fix: Check Recipient validation after RBL checks.
• 2015-07-18Redis added to Bayes module: Speed increased. Tokens stored for tens of days.
• 2015-07-16More adjustments on detecting suspicious xls, doc and html files.
• 2015-07-13Fix false positive in TXT file type
• 2015-07-12Detect fake file types (Update on Header and attachments <= 5).
• 2015-07-12New tutorial for secondary AV, BitDefender 7.7.1 (30 days trial)
• 2015-07-11Detect fake file types.
• 2015-07-05limit Whitelist to SPF/DKIM signed senders only.
• 2015-06-24Returnpath Certification service disabled from SA.
• 2015-06-21Detect & learn some recent .doc malware with new SA custom rules.
• 2015-06-18Supplementary Fingerprint service included.
• 2015-06-05Fix forged Received headers misfiring RBL checks
• 2015-04-17Built-in policy limits introduced.
• 2015-03-19IPv6 added.
• 2015-03-04Report Senders and URLs found in spam or ham to scrolloutf1.com (Collect panel)
• 2015-03-03Include DKIM verification in built-in RBL service
• 2015-03-03Upgrade to spamassassin 3.4.0 (Debian)
• 2015-02-28External RBL for Sender Domain, Sender IP, URL Domain, URL NS and URL IP.
• 2015-02-19Internal RBL for Sender Domain, Sender IP, URL Domain, URL NS and URL IP (in /var/www/rbldns/).
• 2015-02-18Assign different outbound IP pools per sender domain.
• 2015-02-05PowerDNS Recursor replaced by Bind9.
• 2015-01-29Fix GHOST Vulnerability # CVE-2015-0235.
• 2014-11-08Blacklist supports sub-domains and TLDs (.link, .club).
• 2014-10-18SA rules adjusted for false negatives.
• 2014-10-16SSLv3 disabled from web server and smtp server (for aggressive levels)
• 2014-09-26ShellShock fix (apt-get update && apt-get install --only-upgrade bash -y)
• 2014-07-31Attachments decoding improved (reduces the need for AV scanners).
• 2014-07-14Block "application/x-dosexec" mime-type to stop Trojan.GenericKD.1754064 in VoiceMessage.{zip,wav}
• 2014-07-11Host-to-host IPSec transport encryption with pre-shared key.
• 2014-07-06Spam traps per domain.
• 2014-07-03Enable/Disable report email per domain.
• 2014-06-25Spamassassin rules adjusted - minor impact.
• 2014-06-24Reject domains with invalid IPs in MX records - minor impact.
• 2014-06-23Bug fix: allow undecipherable attachments.
• 2014-06-19minor change for "Subject:" logs.
• 2014-06-18bug fix appeared in graphs, due to changes in the previous release.
• 2014-06-15Improved inbound/outbound throttling per hosted domain.
• 2014-06-15Improved Route panel loading.
• 2014-06-06Enforce encrypted connection with email servers.
• 2014-06-05Backup (BCC) incoming/outgoing emails to an alternative mailbox.
• 2014-06-05Clone/duplicate incoming emails to another (sub-)domain.
• 2014-06-05Include Sender address verification.
• 2014-06-05Custom Spam TAG in the Subject.
• 2014-06-05Fallback delivery on alternative email servers.
• 2014-05-30Reduce bounces from some downstream servers
• 2014-05-28Introducing internal DNS server - improves spam detection and Bayesian training.
• 2014-05-15Remove spam, virus and banned files from quarantine (per domain and collector).
• 2014-05-15Secure LDAP added.
• 2014-05-04trusted certificate added in Secure > Certificate.
• 2014-04-28Introducing message Subject and Score details in Monitor > Logs.
• 2014-04-27Error fix: "netset: cannot exclude ip.add.re.ss/32 as it has already been included"
• 2014-04-24Move greylist delay for "Rate Limits in" <= 5 (instead of < 8).
• 2014-04-22Introducing Rate Limits out, Auto defense, more Tips and optimize resources.
• 2014-04-16Upgrade IP banning (with SMTP rejection).
• 2014-04-13Firewall rules against Heartbleed.
• 2014-04-03Introducing Tips in web GUI.
• 2014-03-28Accelerate web surfing by reducing advertisement, tracking and social media content.
• 2014-03-27Fix Firefox compatibility issue.
• 2014-03-22Ban IP addresses for invalid recipients, too much spam, brute force on ssh, sasl, web server and more.
• 2014-03-22Delete messages older than 7 days from Collector > Inbox.
• 2014-03-06Messages from BAD and GOOD folders are deleted after 1 day.
• 2014-01-17(Important) Replace system users with virtual users for SMTP authentication.
• 2014-01-14Update Active Directory validation for Public Folder.
• 2013-12-20Fix outbound anti-spam scanning.
• 2013-11-26Block HTML5 geo-location, ads and more when using web-cache (for HTTP protocol only)
• 2013-11-25Add password complexity for SMTP authentication
• 2013-09-26Bug fixed in Active Directory verification.
• 2013-09-17SMTP authentication per domain.2013-09-14 - Recipient validation for Exchange server using Active Directory.
• 2013-09-08Security level for rate limits (incoming).
• 2013-09-05resource monitor for CPU, RAM, Swap and Disk.
• 2013-08-29SSL/TLS with Perfect Forward Secrecy (for SMTP & HTTPS)
• 2013-08-26blacklist/whitelist from gui.
• 2013-08-21Allow banned/undecipherable content for Header and attach. >=8 and trigger alert.
• 2013-08-15Collect GOOD/BAD messages every 3 minutes.
• 2013-08-11Web cache added for intranet networks. Port 8080.
• 2013-08-03Force Admin to change the default password.2013-08-03 - Release 64 bit ISO.
• 2013-07-20Increase the smtp limits in iptables.2013-07-05 - Improve log search using multiple words: "jul.*5.*18:35.*text2.*text3"
• 2013-07-05Reject blacklisted senders when Connection filter <=5, otherwise quarantine the email.
• 2013-06-18Bug fix in 22-dkim and 23-maps files.
• 2013-06-11Raise the limit from ~90 to ~2,000 domains.
• 2013-04-20Delete messages from BAD/GOOD folders after reading.2013-02-02 - Send whitelisted message to recipient.
• 2013-01-24Fix bug on spam report that caused some MTAs to reject the report.
• 2013-01-23Lower the scoring for News messages.
• 2013-01-19Include web/phone support customization in the return errors.
• 2013-01-13include different values for stress state in Postfix.
• 2012-12-30Bug fix in reporting emails.
• 2012-12-28Change message size limit at 1:20 of the total RAM.
• 2012-12-26Bug fix on trusted networks.
• 2012-12-24DMARC record.
• 2012-12-10Differentiation between mailing-list & fake-free mail for SA rules.
• 2012-12-09Reduce TTL response range for SSH, HTTP, HTTPS, SMTP to Internet and intranet.
• 2012-12-09Reduce max. client concurrent connection, max connection /60s, max. recipients /60s etc.
• 2012-12-09Open additional SMTP ports (optional).
• 2012-12-08Recognize & use Kaspersky antivirus.
• 2012-11-29Tag and Block scores per each domain.
• 2012-11-25Quarantine & reports per each domain (not spam collector).
• 2012-11-21Bug fixed in scrollout.sh related to relay.
• 2012-10-26Upgrade DKIM signature from 1024 bits to 2048 bits.
• 2012-10-23Notify receiver regarding infected messages.
• 2012-10-14Fix spamtraps mechanism - broken by recipient verification.
• 2012-10-12Implement hostrelay/smarthost authentication (for outbound).
• 2012-10-06Implement weighted black/whitelist providers with Postscreen.
• 2012-10-06Fix TSL/SSL error caused by OpenSSL.
• 2012-10-06Remove Postgrey - covered by Postscreen.
• 2012-10-05Activate Postscreen module in new Postfix version 2.9.
• 2012-10-03Bug fix in collector for whitelist and blacklist.
• 2012-09-29Add recipient verification. Reduce bouncing messages, bandwidth usage and more.
• 2012-09-28Change color scheme for Statistics.
• 2012-09-21Reconfigure FuzzyOcr scanning process.
• 2012-09-20Rewrite DLP scanning for archives.
• 2012-09-19Release new configuration file for mailgraph running on Debian.
• 2012-09-19Reduce the aggressiveness for newsletters in response to reviews & emails.